torify/Dockerfile at main · aluvare/torify · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
FROM ubuntu:jammy AS builder

ARG wg_go_tag=0.0.20220316
ARG wg_tools_tag=v1.0.20210914

RUN DEBIAN_FRONTEND=noninteractive apt update && DEBIAN_FRONTEND=noninteractive apt install gcc g++ make git golang-go -y
RUN git clone https://git.zx2c4.com/wireguard-go && \
    cd wireguard-go && \
    git checkout $wg_go_tag && \
    make && \
    make install

ENV WITH_WGQUICK=yes
RUN git clone https://git.zx2c4.com/wireguard-tools && \
    cd wireguard-tools && \
    git checkout $wg_tools_tag && \
    cd src && \
    make && \
    make install

RUN cd /opt/ && git clone https://github.com/coredns/coredns && cd /opt/coredns && make

FROM ubuntu:jammy AS final

RUN DEBIAN_FRONTEND=noninteractive apt update && DEBIAN_FRONTEND=noninteractive apt install iptables supervisor tor netcat net-tools ulogd2 libcap2-bin -y && mkdir -p /opt/redirector /opt/coredns/config /scripts/init-scripts /etc/wireguard

#Just for dev or troubleshooting
RUN DEBIAN_FRONTEND=noninteractive apt install iproute2 iputils-ping sudo curl vim dnsutils -y

COPY --from=builder /opt/coredns/coredns /opt/coredns
COPY --from=builder /usr/bin/wireguard-go /usr/bin/wg* /usr/bin/
ADD conf/supervisor/ /etc/supervisor/conf.d/
ADD conf/iptables /opt/redirector/iptables
ADD conf/ulogd /etc/ulogd.conf
ADD conf/coredns/ /opt/coredns/config/
ADD conf/torrc /opt/redirector/torrc
ADD launcher.sh /scripts/launcher.sh

RUN useradd redirector --uid 1000 && \
	useradd coredns --uid 1001 && \
	chown 1000.1000 -R /opt/redirector && \
	setcap CAP_NET_BIND_SERVICE=+eip /opt/coredns/coredns

RUN echo 'net.ipv4.ip_forward=1\n\
net.core.netdev_max_backlog = 2048\n\
net.core.somaxconn = 1024\n\
net.core.rmem_default = 8388608\n\
net.core.rmem_max = 16777216\n\
net.core.wmem_max = 16777216\n\
net.ipv4.ip_local_port_range = 2000 65000\n\
net.ipv4.tcp_window_scaling = 1\n\
net.ipv4.tcp_max_syn_backlog = 3240000\n\
net.ipv4.tcp_max_tw_buckets = 1440000\n\
net.ipv4.tcp_mem = 50576 64768 98152\n\
net.ipv4.tcp_rmem = 4096 87380 16777216\n\
net.ipv4.tcp_syncookies = 1\n\
net.ipv4.tcp_wmem = 4096 65536 16777216\n\
net.ipv4.tcp_congestion_control = cubic' >> /etc/sysctl.conf && ulimit -n 65535

#RUN apt clean autoclean && apt autoremove --yes && rm -rf /var/lib/{apt,dpkg,cache,log}/

ADD init-scripts/ /scripts/init-scripts/

#HEALTHCHECK --interval=30s --timeout=5s CMD nc -vz 127.0.0.1 12345
#HEALTHCHECK --interval=30s --timeout=5s CMD bash -c "supervisorctl status|grep redirect|grep RUNN"
ENTRYPOINT bash /scripts/launcher.sh